In Canvas mobile apps the log in token never expires; much like Facebook's mobile app retains a password. When an institution has their own authentication system, they don't use the internal Canvas authentication. If a user changes their password within the authentication system at the institution...